diff --git a/CHANGELOG.md b/CHANGELOG.md
index c7eae8c5..0184d080 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,8 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+- Update `zizmor@latest` to 1.28.0.
+
 - Update `wasmtime@latest` to 47.0.2.
 
 - Update `uv@latest` to 0.11.31.
diff --git a/manifests/zizmor.json b/manifests/zizmor.json
index 51da9a33..a0dcc083 100644
--- a/manifests/zizmor.json
+++ b/manifests/zizmor.json
@@ -18,10 +18,13 @@
     }
   },
   "latest": {
-    "version": "1.26.1"
+    "version": "1.28.0"
   },
   "1": {
-    "version": "1.26.1"
+    "version": "1.28.0"
+  },
+  "1.28": {
+    "version": "1.28.0"
   },
   "1.28.0": {
     "x86_64_linux_gnu": {